TY - GEN
T1 - Cybersecurity Situation Assessment Model Based on the Dynamic Fuzzy Analytic Hierarchy Process Tree (D-Fahp Tree)
AU - Miao, Jianhang
AU - Huang, Wei
AU - Luan, Shan
AU - Guan, Yundi
AU - Zhen, Zhong
N1 - Publisher Copyright:
© 2025 IEEE.
PY - 2025
Y1 - 2025
N2 - In the face of increasingly complex and dynamic cyber threats, traditional static assessment models are inadequate for supporting real-time and adaptive cybersecurity risk analysis. This paper proposes a novel cybersecurity situation assessment model based on the Dynamic Fuzzy Analytic Hierarchy Process Tree (D-FAHP Tree), designed to quantitatively evaluate security posture with improved sensitivity, adaptability, and real-time responsiveness. The proposed model integrates fuzzy evaluation methods and hierarchical analysis within a closedloop structure that supports continuous weight adjustment based on attack- driven feedback. Unlike conventional models with fixed weights, the D-FAHP Tree dynamically adapts to threat evolution by introducing an event-response feedback mechanism, including frequency, severity, and coverage-based impact factors. Additionally, an iterative optimization process is formulated to refine indicator weights in response to observed security incidents, enabling the model to effectively reflect the current threat landscape. Experimental results using real-world and simulated attack datasets demonstrate that the D-FAHP Tree significantly en- hances situational awareness accuracy and convergence stability compared to static models. The model's flexible hierarchical structure also supports expansion across multiple security do- mains, including intrusion prevention, application protection, behavior monitoring, and data integrity. This study offers a theoretical and practical foundation for intelligent cybersecurity assessment, contributing to the development of proactive and resilient security operations frameworks.
AB - In the face of increasingly complex and dynamic cyber threats, traditional static assessment models are inadequate for supporting real-time and adaptive cybersecurity risk analysis. This paper proposes a novel cybersecurity situation assessment model based on the Dynamic Fuzzy Analytic Hierarchy Process Tree (D-FAHP Tree), designed to quantitatively evaluate security posture with improved sensitivity, adaptability, and real-time responsiveness. The proposed model integrates fuzzy evaluation methods and hierarchical analysis within a closedloop structure that supports continuous weight adjustment based on attack- driven feedback. Unlike conventional models with fixed weights, the D-FAHP Tree dynamically adapts to threat evolution by introducing an event-response feedback mechanism, including frequency, severity, and coverage-based impact factors. Additionally, an iterative optimization process is formulated to refine indicator weights in response to observed security incidents, enabling the model to effectively reflect the current threat landscape. Experimental results using real-world and simulated attack datasets demonstrate that the D-FAHP Tree significantly en- hances situational awareness accuracy and convergence stability compared to static models. The model's flexible hierarchical structure also supports expansion across multiple security do- mains, including intrusion prevention, application protection, behavior monitoring, and data integrity. This study offers a theoretical and practical foundation for intelligent cybersecurity assessment, contributing to the development of proactive and resilient security operations frameworks.
KW - Cybersecurity Situation Assessment
KW - Dynamic Weight Adaptation
KW - Feedback Optimization
KW - Fuzzy An- alytic Hierarchy Process
KW - Security Decision Support
UR - https://www.scopus.com/pages/publications/105016785445
U2 - 10.1109/ISCTT66403.2025.11137825
DO - 10.1109/ISCTT66403.2025.11137825
M3 - Conference contribution
AN - SCOPUS:105016785445
T3 - 2025 10th International Conference on Information Science, Computer Technology and Transportation, ISCTT 2025
SP - 138
EP - 143
BT - 2025 10th International Conference on Information Science, Computer Technology and Transportation, ISCTT 2025
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 10th International Conference on Information Science, Computer Technology and Transportation, ISCTT 2025
Y2 - 13 June 2025 through 15 June 2025
ER -